CVE-2009-4828

CVE-2009-4828 describes a Cross-Site Request Forgery in Ad Manager Pro (AdManagerPro) 3.0, specifically in administration/admins.php, where an attacker can hijack the authentication of administrators to perform actions that create new administrative users via the admin_created action. The NVD ent...

CVE-2010-4843

CVE-2010-4843 targets PHP Web Scripts Ad Manager Pro 3.0, with a SQL injection in website-page.php exploitable via the pageId parameter. The vulnerability permits remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability (C:P/I:P/A:P); CVSS v2...